Limit the number of tokens allowed in a GraphQL document.

No alias directive for graphql mutation and query types. It can limit the amount of alias fields that can be used for queries and mutations. Preventing batch attacks.

Polyfill of self.scheduler API

WASI Preview2 shim for JS environments

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

MIDI-like instruments from webaudio

Create a security plugin for node.js

Attack Logger & Awareness Display for BonkLM

Utility for detecting phishing domains targeting Ethereum users

An graphical interactive in-browser GraphQL IDE.

Make a regular expression time out if it takes too long to execute

TypeScript definitions for set-blocking

Simple representation of MITRE ATT&CK data

A monkey testing library written in JavaScript, for Node.js and the browser. Use it to check the robustness of web applications by unleashing a horde of undisciplined gremlins.

Educational demo: a deliberately vulnerable npm package showing how GitHub Actions cache poisoning can produce a malicious release without stealing any credential. Do NOT use in production.

Zen by Aikido is an embedded Application Firewall that autonomously protects Node.js apps against common and critical attacks, provides rate limiting, detects malicious traffic (including bots), and more.

Require scripts and styles to use Subresource Integrity

File Type Validation Plugin for FilePond

A markdown parser built for speed

Utility kit for a safe string encoding/decoding